Free EC-Council 312-50V13 CEH V13 Actual Exam Questions - Question 11 Discussion

B tbh, the question’s about confidentiality inside the same LAN, and ESP is the go-to for encryption. Since AH options don’t encrypt at all, they’re out. Tunnel mode adds unnecessary overhead for LAN setups, so that rules out D. A’s ESP transport mode encrypts payloads directly without extra wrapping, making it efficient and secure enough here. So yeah, A fits best given the scenario and what IPSec modes are designed for.

I’m thinking D (AH Tunnel mode) might be off since tunnel mode is more for gateway-to-gateway or network-to-network scenarios, not really for same LAN setups. Also, AH doesn’t encrypt, it just provides integrity and authentication, so it won’t ensure confidentiality. So based on that, anything with AH seems less likely here. The question is about both security and confidentiality, so isn’t ESP transport mode (A) the only one that encrypts the payload directly without extra encapsulation? What do you think about the options that mention AH?

Maybe A is the way to go since ESP transport mode focuses on protecting just the payload, which is usually enough inside a LAN where IP headers don’t need extra protection. The others seem off for this case.

Makes sense to pick A since ESP transport mode handles payload encryption directly. A

Probably A, since ESP provides encryption and transport mode fits LAN use.

A/D? Transport mode (A) is for end-to-end within the same network, and Tunnel mode (D) usually adds overhead for gateway-to-gateway, which isn't needed here. AH options don't provide confidentiality, so probably not C or D.

A. Transport mode fits best for LAN-level security without extra overhead.